A lock happens only when definitive evidence appears inside the admin: a request identified as an AI crawler, AI fetcher, driver-controlled browser or scripted client hits an admin page while a staff login is attached (for example an AI browser agent driving an employee's logged-in session), and the Sprwt-managed lock policy for that class is on (it is on by default for the admin only). A crawler stopped at the login door, a honeypot hit, a browser add-on finding or suspicious activity volume never locks anything – they are reported instead. Once locked, everyone except Sprwt superadmins who opens an admin page sees Administrative access suspended with a reference such as AG-1A2B-3C4D and instructions to contact [email protected]; the page states Your storefront is unaffected and customers can continue to order as normal. The lock does not expire on its own – Sprwt reviews the attempt and lifts it from the AI Scrape Log.